Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language text adventure skill that uses local markdown game-state files as expected for gameplay, with no evidence of hidden code, network access, credential use, or system persistence.
Install this if you want a Chinese-language persistent text adventure. Expect it to read and update a local game_state.md save file, including inventory loss, companion inventory loss, and new-cycle resets as part of gameplay; consider keeping backups if you care about preserving a run.
This markdown file presents the skill's name, description, instructions, and gameplay text exclusively in Chinese, which effectively forces a specific language for use of the skill. The policy allows locale constraints only when users are given a choice or when the restriction is clearly documented and justified, neither of which appears here.
The file presents the skill description and all player-facing prompts in Chinese, with no indication that users may choose another language. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy violation.
The skill directs the agent to read and modify a persistent save file (game_state.md) as part of normal gameplay, but it never clearly tells the user that continuing will change stored state. This creates a consent and integrity issue: a user may believe they are only chatting, while the agent silently overwrites long-lived game data or advances progression.
The implementation details operationalize persistent state changes through Read/Edit tool calls on game_state.md without any user-facing warning, confirmation, or safeguard. In an agent environment, this can lead to silent state mutation, accidental save corruption, or unintended progression if triggered automatically.
The skill explicitly mandates Chinese-only output regardless of user preference, which can override higher-level user language needs and reduce agent usability or accessibility. While this is not a classic security exploit, it is a policy/control issue because the skill is constraining model behavior without user opt-in and could interfere with correct instruction prioritization.
The skill instructs the agent to reset character state, clear the inventory, and wipe current-life experience when starting a new run, but it does not explicitly warn the user that these actions are destructive or clarify what data is permanently lost versus preserved. In an interactive system that persists game state to game_state.md, this can cause accidental progress loss if the transition is triggered unintentionally or if the user misunderstands the consequences.
This markdown skill forces a specific language/locale for all users through its natural-language description and operational guidance. The policy allows locale constraints only when users are given a choice or when the constraint is clearly documented and justified as region-specific, which is not present here.
This markdown skill uses Chinese throughout its description, commands, scenarios, and operational guidance, which effectively forces a specific language for use and maintenance. Under the policy, language constraints should be optional or explicitly justified as region-specific; neither is stated here.
The document defines ambiguous input as a trigger for automatically discarding the lowest-priority item, but later examples also treat inputs like "不要" as a valid choice to forgo the new item. This inconsistency can cause an implementation to mis-handle refusal-like input and perform unintended destructive state changes, resulting in loss of existing inventory items without clear consent.
Allowing automatic item deletion on ambiguous user input authorizes a destructive action without strong confirmation. In an LLM-driven or natural-language interface, ambiguity is common, so this behavior can be triggered accidentally or via prompt manipulation, causing irreversible loss of valuable game state.
This markdown file contains user-facing descriptive content exclusively in Chinese, including the title, section headings, and task descriptions. Under the policy rules, forcing a specific language without user opt-in can be a natural-language policy violation when no language choice or justification is provided.
The description and heading are written entirely in Chinese, which constitutes a language-specific constraint in the skill's natural-language interface. The file does not indicate that Chinese is optional, user-selected, or required for a documented region-specific purpose.
This markdown file contains the skill description and headings entirely in Chinese, including the manifest-style description field and all user-facing content. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale policy issue when no language choice or regional justification is provided.
The file’s descriptive and instructional content is entirely in Chinese, including the manifest description and section content, with no indication that language selection is optional or that the skill is intentionally limited to a Chinese-only audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
The description and operational instructions are presented in Chinese, which effectively fixes the skill's language/locale behavior. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific.
L064-L069 表示队友背包仅按玩家背包相同规则处理添加等操作，但 L338 又声明可以在两个背包间转移道具；核心指令部分并未定义转移流程、限制或保存逻辑。这种文档层面的能力声明与前述操作定义不一致，容易使实现偏离预期。
No suspicious patterns detected.
